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Overview 
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•  T-2  Mod  process  developed  and  used  to 
maintain  safety  for  aircraft  modification  and 
instrumentation 

•  Formal  airworthiness  evaluation  recently 
included  as  a  parallel  process 

•  The  AFTC  Form  6238,  T-2  Modification 
Airworthiness  Determination  and  Preliminary 
Hazard  Analysis,  form  developed  to  support 
both  processes 
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Previous  Form 


PRELIMINARY  HAZARDS  ANALYSIS 

MOB  SERIAL  NUMBER  MOD  NUMBER 

COLUMN  1  /  COLUMN  2  /  INSTRUCTIONS  ALL  ITEMS  CHECKED  IN  COLUMN  1  MUST  BE  EVALUATED 

APPLICABILITY  ACCEPTABILITY  /  IV  COLUMN  2  AM)  EXPLAINED  ON  REVERSE  OR  ON  AN  ATTACHED  SHEET 

NO! 

APPl.IC.VRIJ- 

VPPIJCAU1J 

ACCEPT  ABLK 

l  NDEFINED 

HAZARD  LIST 

1  ISOLATION  OF  ENERGY  SOURCES 

2  FUELS  AND  PROPELLANTS 

1  SYSTEM  ENVIRONMENTAL  CONSTRAINTS 

4  EXTERNAL  ENVIRONMENTAL  IMPACT- 

5  EXPLOSIVE  DEVICES 

<>  COMPATABILITY  OF  MATERIALS 

7  E\d  EFFECTS  OR  SUSCEPT  ABILITY 

8  PRESSURE  VESSELS 

V  CRASH  SAFETY 

10  OPERATION  AND  miNTEN.ANCE 

II  TRAJN1N0  AND  CERTIFICATION 

12  PXJRESE.  RESCUE.  SURVIVAL 

13  LIFE  SUPPORT  REQU1RBMBNTS 

14  FIRE  IGNITION  AND  PROPAGATION 

IS  SHOCK  DAMAGE  RESISTANCE 

ll>  EQUIPMENT  LAYOUT  AND  LIGHTING 

17.  FAIL  SAFE  DESIGN 

18  VULNERABILITY  AND  SURVIVABILITY 

1 »  PROTECTIVE  CLOTHING,  EQUIPMENT.  OR  DE  VICES 

20  L  JGHTNINO  AND  ELECTROSTATIC  PROTBCTK  >\ 

21  OPERATION  ERROR 

RTCa\I\fFNT>ATION'S 

1  SAFETY  REVIEW  BOARD  [_J  IS  ||  IS  NOT  REQUIRED 

a  •-Li.il  ii  ran  •  I  ■  mot  mg  ikbdi  >  verify  uRWQRTWNBaBANDs  itabiljty 

NAME.  GRADE.  AND  OFFICE  SYMBOL  OF  MODIFICATION  PROGRAM  MANAGER 

SIGNATURE 

DATE 

412  MXC*  Kuna  MJK  Mur  US  (F.K)  (FrrfrOHM  PRO)  PREVIOUS  EDITIONS  ARE  OBSOLETE 


MAM  Hill 
Til  III 


Previous  Form  (Cont.) 
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•  Typically  prepared  by  Modification  Managers 
with  some  inputs  from  engineers 

•  Listed  hazard  areas  rather  than  specific  hazards 

-  Areas  did  not  numerical  coincide  with  MIL-HDBK- 
51 6C 

•  Once  an  area  is  checked  as  applicable,  the 
mitigation  would  be  listed  on  the  back  side  of 
the  form 


AFTC  FORM  6238 


This  form  has 
gone  through  a 
number  of 
changes,  with 
this  representing 
the  current 
version  awaiting 
approval  by  the 
airworthiness 
community 


INSTRUCTIONS:  Answ  er  tbe  questions  and  determine  AW  impact  Hazards  checked  Yes  (Y)  in  the  Applicable  column  (APP)  must  also  be  checked  Yes  (Y)  or  No  (N)  in 
die  Compliance  (COMP)  column  indicating  compliance  with  M3L-HDBK-5  L6C  criteria,  or  as  approved  by  the  ME  A  and  CE.DTA.  Use  tbe  back  to  expand  explain. 


ITS 

NO 

Airworthiness  impact  questions:  .4  posnnv  response  is  a  good  mdicator  of  an  AT  impact  rout  r snot  thefina!  decision 

1)  Is  re- accomplishment  of  vaification  activities  requited  to  show  compliance  to  the  baseline  ratification  basis'* 

2)  Have  any  existing  safety  hazaidi  been  impacted  or  have  new  safety  hazards  been  identified? 

3)  Arc  any  safety  flight-critical  items,  logic  and  or  functions  impacted? 

4)  Is  formal  flight  test  to  validate  the  mod  required9 

5)  Does  the  operational  usage  change'* 

6)  Does  the  flight  envelope  change9 

7)  Does  the  service  life  change’’ 

8)  Other 

AIRWORTHINESS 

IMPACT 

r  ATS 

r~  no 

YN 

MJL-HDBK-516C  SECTION 

YN 

MIL-HDBK-5 16C  SECTION 

APP 

COMP 

APP 

COMP 

-  SYSTEMS  ENGINEERING 

12  -ELECTRICAL  SYSTEM 

-  STRUCTURES 

13  -ELECTROMAGNETIC  ENVIRONMENTAL  EFFECTS  <EJ) 

-  FLIGHT  TECHNOLOGV 

14  -  SYSTEM  SAFETY 

PROPULSION  AND  PROPULSION  INSTALLATIONS 

15- COMPUTER  SYSTEMS  .AND  SOFTWARE 

-  AIR  VEHICLE  SUBSYSTEMS 

Id  -  MAINTENANCE 

-  CREW  SYSTEMS 

17  -  ARMAMENT 

ID  -  DIAGNOSTIC  SYSTEMS 

18  PASSENGER  SAFETY 

ll  -  AVIONICS 

EQUIPMENT  AND  CARGO.PAYLOAD  SAFETY 

T-2  MODIFICATION  AIRWORTHINESS  DETERMINATION  AND  PRELIMINARY  HAZARDS  ANALYSIS 


SERIAL  NUMBER: 


MOD  NUMBER: 


412  n 


RECOMMENDATIONS' - 

r  SAFETY  REVIEW  BOARD  REQUIRED 
r  FLIGHT  TEST  REQUIRED 
NAME  GRADE  AND  OFFICE  SYMBOL  OFMEA 


NAME,  GRADE  AND  OFFICE  SYMBOL  OFCEDTA 


r  SAFETY’  REVIEW  BOARD  IS  NOT  REQUIRED 
r  FLIGHT  TEST  IS  NOT  REQUIRED 

SIGNATURE  I  DATE 


date 
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Form  6238  (Cont.) 


INSTRUCTIONS:  Answer  the  questions  and  determine  AW  impact.  Hazards  checked  Yes  (Y)  in  the  Applicable  column  (APP)  must  also  be  checked  Yes  (Y)  or  No  (N)  in 
the  Compliance  (COMP)  column  indicating  compliance  with  MIL-HDBK-5 1 6C  criteria,  or  as  approved  by  the  MEA  and  CE  DTA.  Use  the  back  to  expand  explain. 


T-2  MODIFICATION  AIRWORTHINESS  DETERMINATION  AND  PRELIMINARY  HAZARDS  ANALYSIS 


MDS: 


SERIAL  NUMBER: 


MOD  NUMBER: 


DATE: 


YES 

NO 

Airworthiness  impact  questions:  A  positive  response  is  a  good  indicator  of  an  AW  impact  {but  is  not  the  final  decision) 

1)  Is  re-accomplishment  of  verification  activities  required  to  show  compliance  to  the  baseline  certification  basis? 

AIRWORTHINESS 

IMPACT 

2)  Have  any  existing  safety  hazards  been  impacted  or  have  new  safety  hazards  been  identified? 

3)  Are  any  safety  flight-critical  items,  logic  and  or  functions  impacted? 

4)  Is  formal  flight  test  to  validate  the  mod  required9 

r  YES 

5)  Does  the  operational  usage  change? 

r  NO 

6)  Does  the  flight  envelope  change9 

7)  Does  the  service  life  change9 

8)  Other 

The  form  asks  questions 
similar  to  the  Air  Force  Life 
Cycle  Management  Center’s 
(AFLCMC)  Airworthiness 
Determination  Form  (ADF) 
shown  at  right. 


2.  Airworthiness  Impact  Assessment. 

2.1  Ainvorlhinps.s  ini|);id  que.vlions  (AYVB-007): 

A  posit  we  response  is  a  good  indicator  of an  Airworthiness  impact  but  is  not  the  final 
decision. 

Yes/No 

Y/N  1 )  Does  the  approved  certification  basis  (applicable  criterion,  standards  and 
methods  of  compliance)  need  to  be  updated  [refer  to  Section  1  7)9 

Y/N  2)  Is  rc -accomplishment  of  verification  activities  required  to  show  compliance  to 
the  certification  basis? 

Y/N  3)  Have  any  existing  safety  hazards  been  impacted  or  have  new  safety  hazards 
been  identified? 

Y/N  4)  Arc  any  safety-i'flight-critical  items,  logic  and/or  functions  impacted? 

Y/N  5)  Is  analysis/test/ simulation  demonstration  required  to  assess  the  change? 

Y/N  6)  Is  formal  flight  test  required? 

Y/N  7)  Does  the  operational  usage  change? 

Y/N  8)  Does  the  flight  envelope  change? 

Y’/N  9)  Does  the  service  life  change? 

Y/N  10)  Does  this  require  a  new  Mission  Design  Series  (MDS)? 


2.2  Dot's  this  modification  impact  airworthiness? 

The  final  impact  assessment  is  a  judgment  made  by  the  CEJDTA  with  DOE/DTA  oversight. 


Y/N 


4tf  nt 
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Form  6238  (Cont.) 
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Y/N 

MIL-HDBK-316C  SECTION 

Y/N 

MIL-HDBK-516C  SECTION 

APP 

COMP 

APP 

COMP 

4 -SYSTEMS  ENGINEERING 

12  -  ELECTRICAL  SYSTEM 

5  - STRUCTURES 

1J  ELECTROMAGNETIC  ENVIRONMENTAL  EFFECTS  (E-1) 

6  FLIGHT  TECHNOLOGY 

14  SYSTEM  SAFETY 

7 -PROPULSION  AND  PROPULSION  INSTALLATIONS 

15  -  COMPUTER  SYSTEMS  AND  SOFTWARE 

8  -  AIR  VEHICLE  SUBSYSTEMS 

16  -  MAINTENANCE 

9 -CREW  SYSTEMS 

17  -  ARMAMENT 

10  -  DIAGNOSTIC  SYSTEMS 

18  -  PASSENGER  SAFETY 

11  -  AVIONICS 

20  -  AIR  TRANSPORTABILITY.  AIRDROP.  MISSION/TE ST 

EQUIPMENT  AND  CARGO  PAYLOAD  SAFETY 

HAZARD  AND  COMPLIANCE  SUMMARIES  (See reverse  for  summary  furiiuK) 


SECTION  #-  SECTION  TITLE 

HAZARD  SUMMARY:  (Subsection  number(s) )  Description  of  hazard  and  impact. 
COMPLIANCE  SUMMARY:  Standard(s)  —  Description  of  the  method  of  compliance. 


Identify  which  sections  of  MIL-HDBK-516C  that  are 
applicable  and  indicate  whether  the  risk  mitigation  steps 
comply  with  applicable  standards  and/or  guidance. 
Hazards  are,  where  possible,  further  tied  to  handbook 
subsections  and  standards  identified  in  the  compliance 
summary. 
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Form  6238  (Cont.) 


RECOMMENDATIONS: 

|~  SAFETY  REVIEW  BOARD  REQUIRED 

I-  SAFETY  REVIEW  BOARD  IS  NOT  REQUIRED 

r  FLIGHT  TEST  REQUIRED 

r  FLIGHT  TEST  IS  NOT  REQUIRED 

NAME,  GRADE,  AND  OFFICE  SYMBOL  OF  MEA 

SIGNATURE 

DATE 

NAME.  GRADE.  AND  OFFICE  SYMBOL  OF  CEDTA 

SIGNATURE 

DATE 

A  carryover  from  the  previous  form  5338  by  providing 
Safety  Review  Board  and  Flight  Test  recommendations, 
followed  by  approvals  of  the  Modification  Engineering 
Authority  (MEA)  and  the  Chief  Engineer/Delegated 
Technical  Authority  (CE/DTA).  Nearly  the  entire 
reverse  side  of  the  form  is  available  for  additional 
summaries. 
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Form  6238  (Cont.) 


Prepared  by  engineers  and  signed  by  the  MEA 
and  CE/DTA. 


•  Provided  to  the  CE/DTA  for  airworthiness  impact 
evaluation  prior  to  signing  the  T-2  Modification 
Configuration  Control  Board  Directive  (AFMC 
Form  244) 

•  “Living  Document”  subject  to  re-evaluation  and 
change  at  any  time  during  the  design  and 
modification  process 


Preparation  Process 


•  Begins  with  “free  form”  consideration  of 
hazards 

•  Consider  whether  common  hazards  are 
applicable 

•  Consult  the  Consolidated  Criteria  List  to  help 
ensure  all  areas  are  considered 

•  Formulate  risk  mitigations 

•  Assess  whether  the  mitigations  coincide  with 
the  applicable  standards  and/or  guidance 


412  m 
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Preparation  Process  (Cont.) 
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•  Once  the  engineers  have  developed  the  form  it 
is  presented  to  other  engineers  during  staff  peer 
reviews 

•  The  MEA  then  reviews  and  signs  the  document 
to  be  passed  on  to  the  CE/DTA  to  support  their 
airworthiness  impact  assessment 

•  Will  be  coordinated  through  the  Director  Of 
Engineering  (DOE)  for  impact  modifications 

•  It  is  presented  to  the  Configuration 
Control/Design  Review  Board  (DRB)  for  both 
Preliminary  CCB  and  Design  Approval  requests 
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Common  Hazards 
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•  Aero/ME 

-  Cockpit/Flight  Deck  mounted  items  dislodge  resulting  in  damage 
to  equipment  and/or  injury  to  personnel 

-  Instrumentation  installation  impairs  aircraft  control 

-  Pressure  bulkhead  or  skin  penetrations  prevent  adequate  cabin 
pressurization 

-  Installed  system  inhibits  egress 


-  Installed  system  or  components  interfere  with  the  avionics  system 

-  Power  requirements  of  installed  system  exceed  available  aircraft 
power 

-  Avionics  bus  tap  degrades  operation  of  the  bus 

-  Inadequate  current  protection  or  wire  selection  results  in  overheat 
and  possible  combustion  of  wire  and  electronic  components 
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Exercise 
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•  A  new,  four  engine  transport  aircraft  needs  to  be 
tested  to  develop  handling  characteristics  for 
publishing  in  the  flight  manual.  Among  the 
alterations  needed  are: 


-  Provide  control  switches  to  close  production  fuel 
valves  to  any  one  of  the  engines  in  order  to  evaluate 
the  engine  out  characteristics  during  all  phases  of 
flight 

-  Install  an  in-line  load  cell  in  one  yoke  to  measure 
pilot’s  pitch  and  roll  control  loads 

-  Install  rack  with  DAS/Recorder  and  a  transmitter  and 
antennas  to  telemeter  data  to  a  ground  station 
providing  both  on-board  and  ground  data  recording 

-  Provide  a  display  for  airspeed  on  the  glare  shield. 
Airspeed  developed  from  Special  Instrumentation 


Exercise  (Cont.) 


•  Begins  with  “free  form”  consideration  of 
hazards 

•  Consider  whether  common  hazards  are 
applicable 

•  Consult  the  Consolidated  Criteria  List  to  help 
ensure  all  areas  are  considered 

•  Formulate  risk  mitigations 

•  Assess  whether  the  mitigations  coincide  with 
the  applicable  standards  and/or  guidance 


412  m 
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BACKUP  SLIDES 
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\J  Possible  Exercise  Answer 
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T-2  MODIFICATION  AIRWORTHINESS  DETERMINATION  AND  PRELIMINARY  HAZARDS  ANALYSIS 


MDS: 


SERIAL  NUMBER: 


MOD  NUMBER: 


DATE: 


INSTRUCTIONS:  Answer  the  questions  and  determine  AW  impact.  Hazards  checked  Yes  (Y)  in  the  Applicable  column  (APP)  must  also  be  checked  Yes  (Y)  or  No  (N)  in 
the  Compliance  (COMP)  column  indicating  compliance  with  MIL-HDBK-516C  criteria,  or  as  approved  by  the  MEA  and  CE/DTA.  Use  the  back  to  expand/explain. 


YES 

NO 

Airworthiness  impact  questions:  .1  positive  response  is  a  good  indicator  of  an  AW  impact  (but  is  not  the  final  decision) 

1 )  Is  re-accomplishment  of  verification  activities  required  to  show  compliance  to  the  baseline  certification  basis? 

2)  Have  any  existing  safety  hazards  been  impacted  or  have  new  safety  hazards  been  identified? 

3)  Are  any  safety /flight-critical  items,  logic  and/or  functions  impacted? 

4)  Is  formal  flight  test  to  validate  the  mod  required? 

5)  Does  the  operational  usage  change? 

6)  Does  the  flight  envelope  change? 

7)  Does  the  service  life  change? 

8)  Other 

AIRWORTHINESS 

IMPACT 

r  YES 

[7  NO 

X 

X 

X 

X 

X 

X 

X 

X 

Y/N 

MH-HDBK-516C  SECTION 

Y/N 

MIL-HDBK-5 16C  SECTION 

APP 

COMP 

APP 

COMP 

4  -  SYSTEMS  ENGINEERING 

X 

X 

12  -  ELECTRICAL  SYSTEM 

X 

X 

5 -STRUCTURES 

X 

X 

15  -  ELECTROMAGNETIC  ENVIRONMENTAL  EFFEC  TS  (EJ) 

X 

X 

6  -  FLIGHT  TECHNOLOGY 

14  -  SYSTEM  SAFETY 

'-PROPULSION  AND  PROPUL  SION  INSTALLATIONS 

15  -  COMPUTER  SYSTEMS  AND  SOFTWARE 

8  AIR  VEHICLE  SUBSYSTEMS 

16  -  MAINTENANCE 

X 

X 

9 -CREAV  SYSTEMS 

1?  -  ARMAMENT 

10  -  DLA GNOSTIC  SYSTEMS 

18  -  PASSENGER  SAFETY 

11 -AVIONICS 

20  -  AIR  TRANSPORTABILITY.  AIRDROP.  MISSION  TEST 
EQUIPMENT  AND  CARGO  PAYLOAD  SAFETY 
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Possible  Exercise  Answer  (Cont.) 


HAZARD  AND  COMPLIANCE  SUMMARIES  (See reverse  for  siumnary  format) 

-  HAZARD  SUMMARY:  (Subsection  5.1.9,  5.3.1,  &  9.7.6)  Installed  equipment  (Rack,  recorder  and  glare  shield  mounted  display)  dislodge 
resulting  in  damage  to  equipment  and/  or  injury  to  personnel 

-  COMPLIANCE  SUMMARY:  JSSG-2006  &  JSSG-2010  -  All  installations  will  be  evaluated  for  adequate  strength  for  the  expected 
maximum  loading  conditions 

-  HAZARD  SUMMARY:  (Subsection  5.3.1  &  6.2. 2.2)  In-line  load  cell  fails  resulting  in  loss  of  aircraft  control 

-  COMPLIANCE  SUMMARY:  JSSG-2006  &  JSSG-2008  -  Load  cell  and  installation  will  be  evaluated  for  adequate  strength  for  the 
expected  maximum  loading  conditions.  Co-pilot  yoke  will  not  be  modified  and  a  co-pilot  will  be  present  during  all  testing  to  assume  control 
in  the  event  of  load  cell  failure 

-  HAZARD  SUMMARY:  (Subsection  6.2.6. 1)  Engine  is  shut  down  at  the  wrong  time,  or  multiple  engines  are  shut  down  instead  of  only 
one  engine,  resulting  the  loss  of  aircraft  control 

-  COMPLIANCE  SUMMARY:  JSSG-2008  -  Fuel  shutoff  circuitry  will  only  allow  one  engine  to  be  shut  down.  Fuel  shutoff  switches  will 
be  set  up  to  clearly  indicate  which  engine  is  selected  and  prevent  inadvertent  changes  or  activation 

-  HAZARD  SUMMARY:  (Subsection  9.2.1 .2)  Glare  shield  mounted  display  obstructs  the  pilot’s  view 

-  COMPLIANCE  SUMMARY:  JSSG-2001  -  Display  installation  will  be  assessed  by  the  project  pilot  and  Flight  Safety  personnel  using 
mock-ups  during  development  and  writh  the  final  product  during  installation 

-  HAZARD  SUMMARY:  (Subsection  12.1.1)  Installed  modification  electrical  power  requirement  exceeds  available  aircraft  power 

-  COMPLIANCE  SUMMARY :  JSSG-2009  -  Power  loads  analysis  will  be  performed  to  verify  that  power  consumption  does  not  exceed 
safe  limits 


RECOMMENDATIONS: 


r  SAFETY  REVIEW  BOARD  REQUIRED 
r  FLIGHT  TEST  REQUIRED 


f*  SAFETY  REVIEW  BOARD  IS  NOT  REQUIRED 
fy  FLIGHT  TEST  IS  NOT  REQUIRED 


NAME.  GRADE,  AND  OFFICE  SYMBOL  OF MEA 


SIGNATURE 


DATE 


NAME,  GRADE,  AND  OFFICE  SYMBOL  OFCEDTA 


SIGNATURE 


DATE 


MAM  Hill 

~ram  vn 
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Possible  Exercise  Answer  (Cont.) 


HAZARD  AND  C'OMPLLANCE  SLTMALARIES  (Cont.) 

SECTION  13  -  ELECTROMAGNETIC  ENVIRONMENTAL  EFFECTS  (E3) 

-  HAZARD  SUMMARY:  (Subsection  13.2.1)  Installed  system  or  components  interfere  with  avionics  system 

-  COMPLIANCE  SUMMARY:  MIL-STD-464  -  The  aircraft  will  be  required  to  successfully  pass  an  EMI/EMC  prior  to  release. 
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Variation  on  the  Exercise 


412  m 


•  What  if  the  following  were  required? 

-  The  ability  to  kill  multiple  engines 

-  Load  cells  installed  in  both  yokes 

-  The  pilot  would  rely  solely  on  the  airspeed 
displayed  on  the  glare  shield,  rather  than  have  it 
as  a  reference  value. 
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Variation  on  the  Exercise  Form  6238 


MAM  HU 
-ram  in 


T-2  MODIFICATION  AIRWORTHINESS  DETERMINATION  AND  PRELIMINARY  HAZARDS  ANALYSIS 


MDS: 


SERIAL  NUMBER: 


MOD  NUMBER: 


DATE: 


INSTRUCTIONS:  Answer  the  questions  and  determine  AW  impact.  Hazards  checked  Yes  (Y)  in  the  Applicable  column  (APP)  must  also  be  checked  Yes  (Y)  or  No  (N)  in 
the  Compliance  (COMP)  column  indicating  compliance  with  MIL-HDBK-516C  criteria,  or  as  approved  by  the  MEA  and  CE/DTA.  Use  the  back  to  expand/explain. 


YES 

NO 

Airworthiness  impart  questions:  A  positive  response  is  a  good  indicator  of  an  A  W  impact  (but  is  not  the  final  decision) 

1)  Is  re-accomplishment  of  verification  activities  required  to  show  compliance  to  the  baseline  certification  basis? 

2)  Have  any  existing  safety  hazards  been  impacted  or  have  new  safety  hazards  been  identified? 

3)  Are  any  safety/flight-critical  items,  logic  and/or  functions  impacted? 

4)  Is  formal  flight  test  to  validate  the  mod  required? 

5)  Does  the  operational  usage  change? 

6)  Does  the  flight  envelope  change? 

7)  Does  the  service  life  change? 

8)  Other 

AIRWORTHINESS 

IMPACT 

W  YES 

r  NO 

X 

X 

X 

X 

X 

X 

X 

X 

Y/N 

MIL-HDBK-5 1 6C  SECTION 

Y/N 

MIL-HDBK-5 16C  SECTION 

APP 

COMP 

APP 

COMP 

4  -  SYSTEMS  ENGINEERING 

X 

X 

12  -  ELECTRICAL  SYSTEM 

X 

X 

5 -STRUCTURES 

X 

X 

13 -ELECTROMAGNETIC  ENVIRONMENTAL  EFFECTS  |E3) 

X 

6  -FLIGHT  TECHNOLOGY 

14  -  SYSTEM  SAFETY 

"  PROPULSION  AND  PROPULSION  INSTALLATIONS 

X 

15  -  COMPUTER  SYSTEMS  AND  SOFTWARE 

8  -  AIR  VEHICLE  SUBSYSTEMS 

16  -  MAINTENANCE 

X 

X 

9  -  CREW  SYSTEMS 

U  -  ARMAMENT 

10  -  DLA GNOSTIC  SYSTEMS 

18  -  PASSENGER  SAFETY 

11  -  AVIONICS 

20  -  AIR  TRANSPORTABILITY.  AIRDROP.  MISSION  TEST 
EQUIPMENT  AND  CARGO  PAYLOAD  SAFETY 
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Variation  on  the  Exercise  Form  6238 

(Cont.) 


HAZARD  AND  COMPLIANCE  SUMMARIES  (See  reverse  for  summary  format) 

-  HAZARD  SUMMARY:  (Subsection  5.1.9,  5.3.1,  &  9.7.6)  Installed  equipment  (Rack,  recorder  and  glare  shield  mounted  display)  dislodge 
resulting  in  damage  to  equipment  and/  or  injury  to  personnel 

-  COMPLIANCE  SUMMARY:  JSSG-2006  &  JSSG-2010  -  All  installations  will  be  evaluated  for  adequate  strength  for  the  expected 
maximum  loading  conditions 

-  HAZARD  SUMMARY:  (Subsection  5.3.1  &  6.2.2.2)  Both  in-line  load  cells  fail  resulting  in  loss  of  aircraft  control 

-  COMPLIANCE  SUMMARY:  JSSG-2006  &  JSSG-2008  -  Load  cells  and  installations  will  be  evaluated  for  adequate  strength  for  the 
expected  maximum  loading  conditions.  Because  both  yokes  will  have  in-line  load  cells,  another  way  to  provide  redundancy  is  needed,  so  the 
installation  will  be  designed  such  that  if  the  load  cells  fail  it  will  be  possible  to  still  input  commands,  though  there  may  be  slop  in  the  system 

-  HAZARD  SUMMARY:  (Subsection  6.2.6. 1)  Engines  are  shut  down  at  the  wrong  time,  or  the  wrong  engines  are  shut  down,  resulting  in 
loss  of  aircraft  control 

-  COMPLIANCE  SUMMARY:  JSSG-2008  -  Fuel  kill  switches  will  be  set  up  to  clearly  display  which  engines  are  selected  and  prevent 
inadvertent  changes  or  activation.  Due  to  program  cost  and  time  constraints,  fuel  shutoff  control  components  could  not  be  integrated  into  an 
aircraft  simulator.  Control  components  evaluated  by  Flight  Safety  and  will  be  tested  during  a  couple  of  flight  tests  after  the  aircraft  is 
released  from  its  modification. 

-  HAZARD  SUMMARY:  (Subsection  9.2. 1.2)  Glare  shield  mounted  display  obstructs  the  pilot’s  view 

-  COMPLIANCE  SUMMARY:  JSSG-2001  -  Display  installation  will  be  assessed  by  the  project  pilot  and  Flight  Safety  personnel  using 
mock-ups  during  development  and  with  the  final  product  during  installation 

-  HAZARD  SUMMARY:  (Subsection  12.1.1)  Installed  modification  electrical  power  requirement  exceeds  available  aircraft  power 

-  COMPLIANCE  SUMMARY:  JSSG-2009  -  Power  loads  analysis  will  be  performed  to  verify  that  power  consumption  does  not  exceed 
safe  limits 


RECOMMENDATIONS: 


P  SAFETY  REVIEW  BOARD  REQUIRED 
FLIGHT  TEST  REQUIRED 


[7  SAFETY  REVIEW  BOARD  IS  NOT  REQUIRED 
fZ  FLIGHT  TEST  IS  NOT  REQUIRED 


NAME.  GRADE,  AND  OFFICE  SYMBOL  OF  MEA 


SIGNATURE 


DATE 


NAME,  GRADE.  AND  OFFICE  SYMBOL  OFCEDTA 


SIGNATURE 


DATE 


MAM  Hiai 
t am  vvv 
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4  4  Variation  on  the  Exercise  Form  6238 


HAZARD  AND  COMPLIANCE  SUMMARIES  (Cont.) 

SF.CTION  13  -  ELECTROMAGNETIC  ENVIRONMENTAL  EFFECTS  (F.3) 

-  HAZARD  SUMMARY:  (Subsection  13.2.1)  Installed  system  or  components  interfere  with  avionics  system 

-  COMPLIANCE  SUMMARY :  MIL-STD-464  -  The  aircraft  will  be  required  to  successfully  pass  an  EMI/EMC  prior  to  release. 

SECTION  15  -  COMPUTER  SYSTEMS  AND  SOFTWARE 

-  HAZARD  SUMMARY :  (Subsection  1 5 .6.2)  Airspeed  on  the  glare  shield  mounted  display  is  incorrect  due  to  errors  in  the  software 

-  COMPLIANCE  SUMMARY :  JSSSEH  -  Due  to  the  short  term  nature  of  the  test  program,  it's  decided  not  to  proceed  with  full  software 
certification.  Software  performance  will  be  verified  during  a  couple  of  test  flights  following  the  aircraft’s  release  from  the  modification 
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Variation  on  the  Exercise  Form  6239 


MAM  Hill 

t  am  m 


T-2  MODIFICATION  AIRW  ORTHINESS  COMPLIANCE 

T-2  MODIFICATION  NUMBER  (ARTIFACT  LOCATION) 

INSTRUCTIONS:  Complete  columns  1-3  for  affected  criteria  when  a  T-2  mod  is  determined  to  impact  airworthiness.  Assign  an  overall  AWHI  value  to  determine  reportabilitv. 
This  is  the  Cert  Basis  and  must  be  approved/signed  by  the  CE/DOEDTAs.  After  analyses  and  tests  are  accomplished,  completecolumns4-5,  update  the  overall  AWHI  and 
reportabilitv'  assessment  as  necessary.  OG  accepts/signs  for  operational  risk.  This  becomes  the  Compliance  Report  and  must  be  approvedsigned  by  the  CE  DOE  DTAs. 

Impacted  MIL-HDBK-516C  Sections 

Criteria 
(specific 
para  #) 

Required  Analyses/Tests 
(Include  document  number 
when  applicable) 

Compliance 

(Y/N-Residual 

AWHI) 

Hazard  Summary  Mitigations 

4  -  Systems  Engineering 

4.1  Design  criteria 

4.2  r  Tools  and  databases 

4.3  I-  Materials  selection 

4.4  I-  Manufacturing  and  quality 

4.5  \~  Op.  &  maint.  manuals/TOs 

4.6  \~  Configuration  Management 

5  -  Structures 

5.1  I-  Loads 

5.2  1  Stmctural  dynamics 

5.3  ["“  Strength 

5.4  I-  Damage  tolerance  and  durability  (fatigue) 

5.5  I-  Mass  properties 

5.6  ["”  Flight  release 

6  -  Flight  Technology 

6.1  I-  Flying  Qualities 

6.2  [7  Vehicle  Control  Functions  (VCF) 

6.3  |~  Air  vehicle  aerodynamics  and  performance 

62.2.2 
6.2.6. 1 

(6.2.2  2)  JSSG-2008  -  Laboratory 
tests  to  demonstrate  the  abil  ity  to 
input  commands  after  complete 
failure  of  the  load  cell.  Minimum 
three  samples  tested 
(6.2.6. 1)  JSSG-2008 -Fuel 
shutoff  control  components 
integrated  into  the  aircraft’s 
simulator  for  testing. 

N 

Engines  are  shut  down  at  the  wrong  time,  or  the 
wrong  engines  are  shut  down,  resulting  in  loss  of 
aircraft  control 

Due  to  program  cost  and  time  constraints,  fuel 
shutoff  control  components  could  not  be  integrated 
into  the  aircraft’s  simulator.  Control  components 
were  instead  evaluated  by  Flight  Safety  and  will  be 
tested  during  a  couple  of  flight  tests  after  the 
aircraft  is  released  from  its  modification. 

7  —  Propulsion 

7.1  I-  Propulsion  risk  management 

7.2  I-  Gas  turbine  engine  applications 

7.3  I-  Alternate  propulsion  systems 
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Variation  on  the  Exercise  Form  6239 

(Cont.) 


- 1 - • - ■ - 

Criteria 

Impacted  MIL-HDBK-5 16C  Sections  (specific 

para  ti) 

Required  Analyses/Tests 
(Include  document  number 
when  applicable) 

Compliance 

(Y/N-Residual  Hazard  Summary  Mitigations 

AWHI) 

13— EMI/EMC 

13.1  1  Component/subsystem  E3  qualification 

13.2  Systeni-levelE3  qualification 

14  -  System  Safety 

14.1  |  System  safety  program 

14.2  I-  Safety  design  requirements 

1 4.3  I-  Software  safety  program 

1?—  Computer  Rcsources/Software 

15.1  |  System  Processing  Architecture  (SPA) 

1 5.2  |  Design  and  functional  integration  of  SPA 

elements 

15.3  I-  Processing  hardware/electronics 

1 5.4  I-  Software  development  process 

1 5.5  r  Software  architecmre  and  design 

15.6  (V  Software qualificationand  installation 

15.6.2 

JSSSEH-Full  qualification 
testing  and  report  prepared 

N 

Airspeed  on  the  glare  shield  mounted  display  is 
incorrect  due  to  errors  in  the  software 

Due  to  the  short  term  nature  of  the  test  program,  it’s 
decided  not  to  proceed  with  fall  software 
certification.  Software  performance  will  be  verified 
during  a  couple  of  test  flights  following  the 
aircraft’s  release  from  the  modification 

16—  Maintenance 

16.1  |  Maintenance  manuals/checklists 

16.2  |  Inspection  requirements 

1 7  -  Air  Vehicle/  Stores  Integration 

17.1  1  Gun/rocket  integration  and  interface 

17.2  I-  Stores  integration 

1 7.3  |  Laser  integration 

17.4  I-  Safety  interlocks 

IS-  Passenger  Safety 

18.1  1  Survivability  of  passengers 

18.2  I-  Fire  resistance 

18.3  I-  Physiology  requirements  of  occupants 

2ft  -  Air  Transportability,  Airdrop,  Mission/Test 
Equipment  and  Cargo/Pavload  Safety 

20.1  I-  Air  transportability  and  airdrop 

20.2  F~  Mission/test  equipment  operations  and 

installation 
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Variation  on  the  Exercise  Form  6239 

(Cont.) 


Reportability  Determination/Certification  Basis  Approval  (columns  1-3 


NAME,  GRADE,  AND  OFFICE  SYMBOL  OFCEDTA 

REPORTABLE: 

Y/N 

DATE 

SIGNATURE 

NAME,  GRADE,  AND  OFFICE  SYMBOL  OFDOEDTA 

REPORTABLE: 

Y/N 

DATE 

SIGNATURE 

Aircraft  Operation  Risk  Acceptance  (For  AWHI  of  18-20  Squadron  CC  or  equivalent  si 

ins,  for  AWHI  of  10-1 7  Group  CC  or  equivalent  signs) 

NAME,  GRADE,  AND  OFFICE  SYMBOL  OFOG 

ACCEPT  RISK 

Y/N 

DATE 

SIGNATURE 

Compliance  Report  Approval  (columns  4-5) 

NAME.  GRADE.  AND  OFFICE  SYMBOL  OFCEDTA 

DATE 

SIGNATURE 

NAME.  GRADE.  AND  OFFICE  SYMBOL  OFDOEDTA 

DATE 

SIGNATURE 
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Variation  on  the  Exercise  Form  6239 

(Cont.) 

Overall  Airworthiness  Hazard  Index  (AWHI) 


jjji  mm  mm 
TIB  III 


The  overall  modification  AWHI  is  typically  the  worst  of  all  the  sections,  however,  as  several  hazards  are  combined,  the  resultant  overall  AWHI 
could  be  more  extreme  due  to  the  interaction  between  system/subsystem  updates  as  described  in  AWB-007. 


HAZARD 

CATEGORIZATION 

SEVERI  TY* 

CATA  S  TROP  HI  C  (1 )  |  CRI T1  CAL  (2) 

MARGINAL  (3) 

NEGLIGIBLE  (4) 

FREQUENT  (A) 

F  =  or  >  100/1  OOKnthrs 
R  PROBABLE  (B) 

E  1 0-99/1 OOK  M  hrs 


Q 

U 

E 

OCCASIONAL  (C) 

1.0-9.9/100K  m  hrs 

6 

11 

18 

N 

C 

REMOTE  (D) 

0  01-0  99/1  OOK  It  hrs 

8 

10 

14 

19 

Y 

IMPROBABLE  (E) 

■  or  <  0  01/100K  It  hrs 

12 

15 

17 

20 

13 


16 


'Severity  is  the  woist  credible  consequence  of  a  hazard  in  terms  of  degree  of  injury,  property  damage  or  effect  on  mission  defined  below 

(1)  Catastrophic:  Class  A  (damage  >  $2M  /  fatality  /  permanent  total  disability  /  loss  of  Aircraft) 

(2)  Critical:  Class  B  ($500K  <  damage  <  $2M  /  permanent  partial  disability  /  hosplallzation  of  5  or  more  personnel) 

(3)  Ma  rginal:  Class  C  ($50K  <  damage  <  $500K  /  Injury  results  in  1  or  more  lost  workdays) 

(4)  Negligible:  All  other  injury/damage  less  than  Class  C 

(Table  Adapted  from  MIL-STD-882D  Table  A-l  thru  Table  A-IV) 

(ForT-2  Modifications,  "FREQUENCY”  is  evaluated  forthe  duration  of  use  within  the  100K  It  hraircraft  life  span) 


Overall  Modification  AWHI  =  12 


Reportable  AWHI  is  1-9. 
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